Requirements and service types for service providers of information services

Service provider’s responsibilities

When you receive data from Traficom, you are responsible for processing it in your own service. You must ensure that the data is processed according to law, securely and only for the purpose approved by Traficom.

The service provider acts as the controller of the disclosed personal data. The controller is responsible for the processing of personal data and for ensuring that the users’ data protection is maintained.

Make sure that:

• you only process data for an approved purpose
• data protection and information security are part of the service implementation
• users have only the access rights they need
• if necessary, you can verify who has processed the data
• you delete the data when they are no longer needed.

How is register data delivered to service providers

Data are primarily disclosed through the interface. You can search for individual vehicle or watercraft data from the interface using a registration number or serial number. You can search for information on a person's right to drive and professional qualifications using their personal identity code.

You cannot search for vehicle data using a personal identity code or business ID.

The interface messages are in XML format. The service provider is responsible for ensuring that the information is displayed and processed in accordance with Traficom’s instructions.

Data may be delivered only if the service cannot be technically implemented through the interface. In your application, explain why you need the delivery of data. The number of queries, the pricing or the costs of the queries are not grounds for the disclosure of data.

The delivery of data always requires an intermediary service agreement with Vivicta Oy.

When a non-disclosure order prohibits the use of data

A natural person may prohibit the disclosure of their personal data from the Transport Register. A non-disclosure order may limit which data are disclosed.

The order does not prevent the disclosure of data to the public authorities or businesses performing statutory tasks.

Non-disclosure orders in accordance with the Finnish Act on Transport Services do not prevent the disclosure of data to debt collection agencies for the purpose of identifying the debtor and debt collection.

What kind of services can the data be used for

The purpose of data use must be related to transport. Merely having a need to retrieve vehicle data is not enough if the actual purpose of the service relates to some other matter.

For example, in a spare parts service, the data are used to find the correct spare parts, which means that the purpose of use is related to a vehicle and transport.

Data are not disclosed to a service where vehicle data are needed to support other business activities, but the actual purpose of the service is not related to transport.

Services for business use

The service can be provided to businesses with a transport-related purpose for processing the data. These companies may include car dealerships, repair shops, spare parts shops, towing services, and financial and insurance companies.

In services provided to businesses, the data use must be based on personal user IDs. The service must enable later verification of who has processed the data disclosed from the Transport Register.

You must always apply for a permit for onward disclosure of data for customer organisations using business services.

Car auctions

A car auction refers to a platform used for the trade in vehicles. The service requirements depend on who is authorised to post and view sales advertisements.

Auctions aimed at car dealerships

If a private person posts an auction listing on a platform used by car dealerships:

• technical vehicle data and owner information may be displayed in the service
• each user must log in to the service
• the service description must be used to define user-specific daily query limits to prevent misuse
• car dealerships must still apply for permits for onward disclosure of data before introducing the service.

Auctions used jointly by private individuals and car dealerships

If both private individuals and car dealers may post auction listings and buy vehicles:

• the service may only display technical vehicle data
• owner information may not be displayed
• vehicle identification numbers may not be displayed as they are deemed personal data
• no login is required
• the number of queries by a single user must be limited to five queries per day.

Spare parts services

In spare parts services, users can search for spare parts suitable for a vehicle by using a registration number or a vehicle identification number.

If the service is provided to businesses, notify Traficom of the customer organisation. In the business service, users must have personal user IDs to enable later verification of data processing.

If the service is intended for consumers and displays no personal data, such as the vehicle identification numbers, it is not necessary for consumers to register for the service. Vehicle identification numbers may be used internally by the service.

If a consumer service displays, for example, vehicle identification numbers based on a registration number, it must be possible to identify the person who used the service afterwards. In this case, the service must be implemented using a login function, for example.

If it is not technically possible to implement the service as an interface query, provide justifications for the data-based implementation in your application.

Right to drive and professional qualification details in services

The interface returns real-time data on the validity of the right to drive or professional qualification and the start date of the permit.

The date of expiry of the right to drive or professional qualification cannot be disclosed.

Single query services for citizens

A single query service is a public information service used to only disclose data in individual situations. The service can be implemented as a text message, telephone or online service, for example.

The services are typically provided for purposes such as increasing the reliability of car sales between consumers. Consumers can use a registration number to search for information on the owner and holder of a vehicle or its technical details, and to check the accuracy of the information provided in a sales advertisement.

Market information services

A market information service refers to a service or user interface that enables the user to view market shares related to means of transport and use search criteria to filter the information displayed in the service.

The market information service produces transport-related information on the market for different business needs.

The service must never display any information identifying a vehicle or a natural person.

In the service description, provide information about:

• the search criteria
• details displayed in the service
• user groups
• possible customer organisations.

You must always apply for permits for onward disclosure of data for customer organisations using the market information service.

Market information products

A market information product refers to a dataset based on data from the Transport Register. It may contain information identifying a legal person, such as a business. A customer can create a market information product through the service, or a service provider can deliver a finished market information product.

The market information product may not reveal any trade secrets that may be related to a company's vehicle fleet or other secrets related to private business activities.

You must always apply for permits for onward disclosure of data for customer organisations.

Statistics

Statistics consist of processed numerical data that can be presented in a table or a graph, for example.

Statistics compiled on the basis of Transport Register data may not contain information identifying a private person or a legal person. Statistics may only contain result sets, each of them containing at least five observations.

Debt collection agencies

Traficom discloses data from the Transport Register to companies engaged in collection activities subject to a licence in accordance with the Act on Transport Services.

Data may be disclosed for the purposes of identifying the debtor and debt collection.

Service fees

Interface queries and datasets are subject to a fee. Prices are determined on the basis of the number of queries or the type of data.

The processing fee for a service description application is EUR 1,500, and it is charged in connection with the issuance of a positive or negative decision.

For questions about the pricing of the intermediary service agreement, contact Vivicta Oy.

Instructions and information content

Legislation

Underlying regulations: